Information Assurance Admin II

General Atomics; Herndon (VA); On-site; USD 76,000 - 128,000; Full time

Job summary

General Atomics in Herndon, VA seeks an Information Systems Security Officer (ISSO) to monitor and enforce IT security compliance for classified systems. You will work on vulnerabilities, risk mitigation, and secure configurations across Windows, Linux, and virtualization platforms.

The role requires DoD knowledge, 8570 IAM Level I, and active TS clearance with SAP/SCI eligibility. Expect onsite work with travel and a strong emphasis on documentation and stakeholder collaboration.

Qualifications

• Typically requires a bachelors degree in a related discipline and three or more years of progressive professional experience in information assurance or a related field.
• Must possess an active Top Secret (with SAP & SCI eligibility).
• Must maintain DoD 8570 IAM Level I (e.g. Security +) professional certification as required by customers or contractual obligations.
• Security + certification required.
• Experience with DoD policy such as Risk Management Framework and Joint SAP Implementation Guide.
• Operational experience with installing, troubleshooting, and auditing Windows desktop & server operating systems.
• Experience with DISA STIGs, SCAP tool, ACAS.
• Experience installing and troubleshooting common x86-based computer hardware.

Responsibilities

• Conducts ongoing vulnerability assessments and security audits to identify cybersecurity risks in accordance with DoD, DOE, and IC standards.
• Drives improvements necessary to mitigate those risks.
• Implement cybersecurity requirements for LAN/WAN devices including routers and firewalls.
• Builds and implements workstations and servers running Windows and Linux.
• Builds virtualization infrastructure using VMware or HyperV.
• Monitors systems for indicators of compromise to identify insider threats.
• Performs analysis of vulnerabilities and leads action plan development.
• Regularly reviews security documents and procedures.
• Reports vulnerabilities and mitigation status to management.

Skills

Vulnerability assessment

Risk assessment

Network security

Security monitoring

RMF knowledge

STIGs

Windows/Linux admin

Splunk

ACAS

DoD policies

Education

Bachelor's degree

Security+ certification

Top Secret clearance

DoD 8570 IAM Level I

Tools

Cisco IOS

VMware/HyperV

SCAP

STIG Viewer

Active Directory

Windows Backup

Job description

58058BR

Job Summary:

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

We have an exciting opportunity for an Information Systems Security Officer (ISSO) to join our Classified Systems team in Herndon, VA.

With general supervision, this position is responsible for participating in monitoring, evaluating and administering system compliance with information technology (IT) security requirements to ensure company, regulatory and customer requirements are met.

DUTIES AND RESPONSIBILITIES:

• Conducts ongoing vulnerability assessments and security audits to identify cybersecurity risks in accordance with Department of Defense (DoD), Department of Energy (DOE), and Intelligence Community (IC) standards, regulations, and cybersecurity policies/procedures.

• Drives improvements necessary to mitigate those risks.

• Implement cybersecurity requirements for local area networks (LANs), wide area networks (WANs), routers, firewalls, and related network devices which typically requires experience with Cisco IOS.

• Builds and implements workstations and servers running multiple operating systems such as Windows 11, Windows Server, and RedHat Linux.

• Builds and implements virtualization infrastructure using tools such as VMware or HyperV.

• Monitors multiple company information systems for indicators of compromise (IoC) to identify insider threats and potential espionage activity.

• Performs technical analysis of vulnerabilities and leads in the development of vulnerability corrective action plans.

• Conducts a regular review of network, application and operation system security documents and procedures.

• Reviews results of vulnerability assessments and code reviews and informs management of vulnerabilities, risk and mitigation.

• Proven ability to leverage technical expertise in the following:

• Splunk Enterprise, installation and management.

• Nessus Vulnerability Assessment, installation, and management.

• Security Technical Implementation Guide (STIGs) to identify, analyze, and remediate security threats.

• Network and System Administration.

• Windows Backup procedures and management.

• Implementing secure configurations based on NIST (800-53, 800-171) with Continuous Monitoring (CONMON) principles.

• Knowledge of Risk Management Framework (RMF) is a plus.

• Responsible for observing all laws, regulations and other applicable obligations wherever and whenever business is conducted on behalf of the Company. Expected to work in a safe manner in accordance with established operating procedures and practices.

• Performs additional duties as assigned.

Technical Skills:

• Splunk Enterprise

• Nessus Vulnerability Assessment

• Security Content Automation Protocol (SCAP)

• Security Technical Implementation Guide (STIG) and STIG Viewer

• Network and System Administration

• Active Directory Management

• Windows Backup

Experiences:

• Implemented Splunk Enterprise for real-time security monitoring and incident response, leading to a quantifiable improvement to threat detection and response.

• Utilized Nessus Vulnerability Assessment to identify and prioritize security vulnerabilities within the network infrastructure, resulting in overall security posture.

• Leverage Assured Compliance Assessment Solution (ACAS) to automate security data ingestion and processing, streamlining operations and improving efficiency.

• Ensured system security by adhering to STIGs and utilizing STIG viewer to maintain configuration compliance with industry best practices.

• Supported network and system administration tasks, including user management, access control, and system maintenance.

• Performed regular Windows Backups to ensure data availability in the event of a system failure or security incident.

• Demonstrated understanding of NIST security frameworks (800-53, 800-171, other special publication guides).

• Applying CONMON principles for continuous monitoring and risk mitigation.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

Job Qualifications:

• Typically requires a bachelors degree in a related discipline and three or more years of progressive professional experience in information assurance or a related field. Equivalent professional experience may be substituted in lieu of education.

• Must possess an active Top Secret (with SAP & SCI eligibility).

• Must maintain DoD 8570 IAM Level I (e.g. Security +) professional certification as required by customers or contractual obligations.

• Security + certification required.

• Experience with DoD policy such as Risk Management Framework and Joint SAP Implementation Guide.

• Operational experience with installing, troubleshooting, and auditing Windows desktop & server operating systems.

• Experience with DISA STIGs, SCAP tool, ACAS.

• Experience installing and troubleshooting common x86-based computer hardware.

• Must demonstrate a general understanding of information assurance principles, theories, concepts and techniques. Must have experience organizing, planning, scheduling, conducting, and coordinating work assignments to meet project milestones or established completion dates.

• Must possess the ability to understand new concepts quickly and apply them in an evolving environment while contributing to the development of new processes.

• Must be customer focused and possess:

• The ability to identify issues, analyze data and develop solutions to a variety of problems.

• Good analytical, verbal and written communication skills to accurately document, report, and present findings.

• Good interpersonal skills enabling an effective interface with other professionals; and good computer skills.

• Ability to work independently or in a team environment is essential as is the ability to work extended hours as required.

Soft Skills:

• Problem-Solving

• Analytical thinking

• Attention to detail.

• Adaptability

• Communication

• Teamwork

Job Category:

Information Technology

Experience Level:

Mid-Level (3-7 years)

Workstyle:

Onsite

Full-Time/Part-Time:

Full-Time Salary

Pay Range Low:

76,000

Pay Range High:

127,750

Travel Percentage Required:

25% - 50%

Relocation Assistance Provided?:

No

US Citizenship Required?:

Yes

Clearance Required?:

Yes

Clearance Level:

Secret

General Atomics is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity Employer and will consider all qualified applicants for employment without regard to race, color, religion, religious creed, ancestry, gender, pregnancy, sex, sexual orientation, transitioning status, gender identity, gender expression, national origin, age, genetic information, military and veteran status, marital status, medical condition, mental disability, physical disability, or any other basis protected by local, state, or federal law. In accordance with applicable federal law, General Atomics takes affirmative action to employ and advance the employment of qualified protected veterans and individuals with disabilities. We also prohibit compensation discrimination under all applicable laws. U.S. Citizenship is required for certain positions. To learn more, please review the EEOC's "Know Your Rights: Workplace Discrimination is Illegal" poster.